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Listing of the Claims: 

The following is a complete listing of all the claims in the application, with 
an indication of the status of each: 



1 80 (Currently Amended). A method of accessing personal information, 

2 associated with a plurality of users and stored in a computer system, in a 

3 manner that protects the privacy of users, wherein each user has a personal 

4 identifier and a plurality of anonymous identifiers, comprising the steps of: 

5 prompting a user for the user's personal identifier; 

6 determining a first anonymous identifier from information derived 

7 fi-om the user's personal identifier; 

8 accessing data associated with the user stored in a first database 

9 using the first anonymous identifier as an index to a first database : 

10 authenticating the user using the data associated with the user 

1 1 accessed in said first database using the first anonymous identifier; 

12 identifying a second anonymous identifier fi-om information 

13 derived from the user's personal identifier if the step of authenticating is 

14 positive; and 

15 using the second anonymous identifier as an index to a second 

16 database distinct from said first database to access personal information 

17 associated with the user stored in a said second database. 



1 81 (Previously Presented). The method for accessing personal information 

2 recited in claim 80, fiirther comprising the steps of: 

3 providing the user's personal identifier to a first server computer, 

4 said first server computer performing the step of determining the first 

5 anonymous identifier; 

6 providing the first anonymous identifier to a second server 

7 computer, said second server computer performing the steps of accessing 

8 data fi-om said first database and authenticating the user, said second server 

9 computer further providing a positive indication to the first server 
10 computer fiirther providing a positive indication to the first server 
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1 1 computer if the user is successfully authenticated; 

12 wherein in said first server computer preforms the step of 

13 determining the second anonymous identifier in response to a positive 

14 indication from the second server computer further providing the second 

1 5 anonymous identifier to a third server computer, said third server computer 

16 performing the step of accessing personal information associated v^ith the 

1 7 user from said second database. 



